$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133364.roa File: AS133364.roa (raw, json) Hash identifier: 8Eiir0tiXgFs2ANfXXov3sghWQ0x3ycHjayPROtzAvA= Subject key identifier: 04:EA:DA:A0:B9:05:B9:C5:1F:96:16:CF:C7:E7:2E:D5:99:FC:59:BA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0FD2A50890FF72D07B047619657BC90E71116E8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133364.roa Signing time: Sat 02 May 2026 09:21:43 +0000 ROA not before: Sat 02 May 2026 09:16:43 +0000 ROA not after: Sat 01 May 2027 09:21:43 +0000 asID: 133364 IP address blocks: 103.36.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d2:a5:08:90:ff:72:d0:7b:04:76:19:65:7b:c9:0e:71:11:6e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:43 2026 GMT Not After : May 1 09:21:43 2027 GMT Subject: CN=04EADAA0B905B9C51F9616CFC7E72ED599FC59BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:1f:59:11:98:02:72:d1:d7:42:53:b5:74: 7b:81:f4:b6:bb:b4:14:95:83:5b:6b:98:52:e0:44: b1:37:c7:be:03:b5:7e:da:c5:d2:64:0b:b5:21:63: f5:44:b8:f3:a8:2f:fe:e1:71:71:a4:dc:5e:a4:35: 79:63:c2:20:81:9b:02:8a:3b:e1:a8:3e:e9:26:ce: 92:e2:90:20:55:60:67:29:d1:23:94:87:b4:d1:09: 92:8b:dd:80:44:c9:a4:b3:61:83:45:43:80:83:0d: 78:8a:1d:91:f6:b0:3e:31:b0:02:5c:69:99:51:77: c8:06:a3:4d:ae:d4:64:e0:bc:84:2a:29:2e:e5:9f: 98:ab:e5:69:e7:7a:3b:60:fc:1b:65:21:19:ec:92: 77:f7:fc:d6:8e:cf:a8:f9:5c:63:bc:eb:41:43:49: 10:c4:71:ba:83:f0:fb:67:9c:fe:74:80:68:d3:6b: 8e:0e:c4:1e:08:3d:a2:f7:52:ef:9b:e9:67:bc:08: 97:84:6b:25:62:00:f4:64:ec:eb:74:65:f7:e0:09: be:07:d5:4e:dd:ca:8c:e5:ea:f5:6b:5f:25:7c:6c: 1b:62:fc:b5:ba:de:35:c9:a7:da:33:ef:c2:5d:d1: e9:6f:06:60:5b:9e:14:ae:a6:eb:84:f6:13:48:e0: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:DA:A0:B9:05:B9:C5:1F:96:16:CF:C7:E7:2E:D5:99:FC:59:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133364.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.14.0/23 Signature Algorithm: sha256WithRSAEncryption 65:ad:3a:4c:98:d3:3a:c3:a0:d8:79:9e:b1:1a:75:6d:49:00: 18:74:c2:14:db:c2:3c:b9:cb:9a:18:f3:6f:2e:a8:f2:01:5a: dd:e5:f3:e3:f7:0c:44:03:41:86:5a:30:b0:73:91:34:d9:b5: a8:6c:ae:09:00:91:43:4d:21:75:fe:f9:61:4e:3e:54:5e:cf: 35:c9:fa:87:fc:6c:75:4b:3d:9c:94:a7:69:6f:15:f2:f2:86: fb:0e:b3:f5:ff:51:ab:46:4d:1c:2e:80:9f:74:a8:b2:55:33: 62:42:d0:da:28:4b:37:4e:6d:a0:95:66:fb:fe:6d:b4:a9:52: 31:60:2f:56:c9:a9:92:07:0e:ef:c5:a8:6c:d5:dd:64:b3:56: ed:7d:ed:af:f5:95:59:0f:4e:e7:59:ca:b1:4c:c8:80:3e:fb: 66:db:92:87:3a:2f:a2:78:41:23:74:99:92:0e:27:4a:64:b8: 44:7f:43:be:ae:3a:2e:6a:37:a4:03:f5:37:ca:6a:e8:2d:f1: da:7a:d9:a0:b7:b7:ea:51:4e:04:0e:5b:17:14:90:25:96:fe: 5d:da:65:63:9b:2c:54:63:aa:9b:c7:4b:30:02:ff:5a:da:ee: 42:72:f7:5c:3c:75:26:e5:12:51:77:ca:02:a8:88:87:a0:22: 8b:33:82:5c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUD9KlCJD/ctB7BHYZZXvJDnERbo4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY0M1oX DTI3MDUwMTA5MjE0M1owMzExMC8GA1UEAxMoMDRFQURBQTBCOTA1QjlDNTFGOTYx NkNGQzdFNzJFRDU5OUZDNTlCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBuH1kRmAJy0ddCU7V0e4H0tru0FJWDW2uYUuBEsTfHvgO1ftrF0mQLtSFj 9US486gv/uFxcaTcXqQ1eWPCIIGbAoo74ag+6SbOkuKQIFVgZynRI5SHtNEJkovd gETJpLNhg0VDgIMNeIodkfawPjGwAlxpmVF3yAajTa7UZOC8hCopLuWfmKvlaed6 O2D8G2UhGeySd/f81o7PqPlcY7zrQUNJEMRxuoPw+2ec/nSAaNNrjg7EHgg9ovdS 75vpZ7wIl4RrJWIA9GTs63Rl9+AJvgfVTt3KjOXq9WtfJXxsG2L8tbreNcmn2jPv wl3R6W8GYFueFK6m64T2E0jgmmUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQE6tqg uQW5xR+WFs/H5y7VmfxZujAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzMzY0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZyQOMA0GCSqGSIb3DQEBCwUAA4IBAQBlrTpMmNM6w6DYeZ6xGnVtSQAY dMIU28I8ucuaGPNvLqjyAVrd5fPj9wxEA0GGWjCwc5E02bWobK4JAJFDTSF1/vlh Tj5UXs81yfqH/Gx1Sz2clKdpbxXy8ob7DrP1/1GrRk0cLoCfdKiyVTNiQtDaKEs3 Tm2glWb7/m20qVIxYC9WyamSBw7vxahs1d1ks1btfe2v9ZVZD07nWcqxTMiAPvtm 25KHOi+ieEEjdJmSDidKZLhEf0O+rjouajekA/U3ymroLfHaetmgt7fqUU4EDlsX FJAllv5d2mVjmyxUY6qbx0swAv9a2u5CcvdcPHUm5RJRd8oCqIiHoCKLM4Jc -----END CERTIFICATE-----Generated at Sun May 3 00:40:40 2026 by rpki-client